You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@subversion.apache.org by ds...@apache.org on 2021/12/28 13:49:34 UTC

svn commit: r1896475 - in /subversion/site/staging: ./ docs/release-notes/1.14.html faq.html index.html news.html packages.html roadmap.html

Author: dsahlberg
Date: Tue Dec 28 13:49:34 2021
New Revision: 1896475

URL: http://svn.apache.org/viewvc?rev=1896475&view=rev
Log:
In site/staging: Catchup merge from site/publish

Modified:
    subversion/site/staging/   (props changed)
    subversion/site/staging/docs/release-notes/1.14.html
    subversion/site/staging/faq.html
    subversion/site/staging/index.html   (contents, props changed)
    subversion/site/staging/news.html   (contents, props changed)
    subversion/site/staging/packages.html
    subversion/site/staging/roadmap.html   (props changed)

Propchange: subversion/site/staging/
------------------------------------------------------------------------------
  Merged /subversion/site/publish:r1891316-1896474

Modified: subversion/site/staging/docs/release-notes/1.14.html
URL: http://svn.apache.org/viewvc/subversion/site/staging/docs/release-notes/1.14.html?rev=1896475&r1=1896474&r2=1896475&view=diff
==============================================================================
--- subversion/site/staging/docs/release-notes/1.14.html (original)
+++ subversion/site/staging/docs/release-notes/1.14.html Tue Dec 28 13:49:34 2021
@@ -1661,6 +1661,26 @@ Subversion 1.14.1 restores support for b
 
 </div> <!-- issues-other-apr-1-4 -->
 
+<div class="h4" id="issues-other-sqlite-3-36">
+<h4>Error building with SQLite 3.36
+  <a class="sectionlink" href="#issues-other-sqlite-3-36"
+     title="Link to this section">&para;</a>
+</h4>
+
+<p>Building Subversion with SQLite 3.36 on Unix-like systems may fail with an
+undefined reference to unixFcntlExternalReader:</p>
+
+<pre>/usr/bin/ld: .libs/sqlite3wrapper.o: in function `unixFileControl':
+subversion-1.14.1/sqlite-amalgamation/sqlite3.c:38131: undefined reference to `unixFcntlExternalReader'
+collect2: error: ld returned 1 exit status
+make: *** [build-outputs.mk:530: subversion/libsvn_subr/libsvn_subr-1.la] Error 1
+</pre>
+
+<p>This appears to be caused by a bug in SQLite 3.36 only. Subversion builds
+successfully with other versions of SQLite, such as SQLite 3.35 and 3.37.</p>
+
+</div> <!-- issues-other-sqlite-3-36 -->
+
 </div>  <!-- issues-other -->
 
 </div>  <!-- issues -->

Modified: subversion/site/staging/faq.html
URL: http://svn.apache.org/viewvc/subversion/site/staging/faq.html?rev=1896475&r1=1896474&r2=1896475&view=diff
==============================================================================
--- subversion/site/staging/faq.html (original)
+++ subversion/site/staging/faq.html Tue Dec 28 13:49:34 2021
@@ -1705,6 +1705,8 @@ do svnlook propget -r $i --revprop $REPO
     title="Link to this section">&para;</a>
 </h3>
 
+<p class="todo"><!-- See thread http://mail-archives.apache.org/mod_mbox/subversion-dev/202108.mbox/%3C20210814112855.GC26435%40tarpaulin.shahaf.local2%3E -->This FAQ entry has not been updated since 2003 and is known to contain information no longer accurate or relevant.</p>
+
 <p><a href="https://tortoisesvn.net/">TortoiseSVN</a> has an excellent
 document that describes setting up a Subversion server on Windows. Go to
 <a href="https://tortoisesvn.net/docs/release/TortoiseSVN_en/tsvn-serversetup.html#tsvn-serversetup-apache-5"

Modified: subversion/site/staging/index.html
URL: http://svn.apache.org/viewvc/subversion/site/staging/index.html?rev=1896475&r1=1896474&r2=1896475&view=diff
==============================================================================
--- subversion/site/staging/index.html (original)
+++ subversion/site/staging/index.html Tue Dec 28 13:49:34 2021
@@ -70,6 +70,30 @@
 
 <!-- In general, we'll keep only the most recent 3 or 4 news items here. -->
 
+<div class="h3" id="news-20211215">
+<h3>2021-12-15 &mdash; Subversion NOT affected by CVE-2021-44228 (Log4Shell)
+<a class="sectionlink" href="#news-20211215"
+   title="Link to this section">&para;</a>
+</h3>
+
+<p>Subversion is not based on Java and does not depend on the vulnerable
+ Apache Log4j library.</p>
+
+<p>Subversion provides language bindings for Java ("JavaHL") but this code
+ does not depend on the Apache Log4j library.</p>
+
+<p>However depending on your installation there may be related components
+ that are vulnerable:</p>
+  <ul>
+    <li>Some vendors provide Java based web interfaces bundled with their
+      Subversion distribution. Please check your vendor's information to
+      verify if you are vulnerable.</li>
+    <li>It is possible to write repository hooks in Java. These hooks are
+      written by the repository administrator.</li>
+  </ul>
+
+</div> <!-- #news-20210526 -->
+
 <div class="h3" id="news-20210526">
 <h3>2021-05-26 &mdash; IRC migration to libera.chat
 <a class="sectionlink" href="#news-20210526"

Propchange: subversion/site/staging/index.html
------------------------------------------------------------------------------
  Merged /subversion/site/publish/index.html:r1891316-1896474

Modified: subversion/site/staging/news.html
URL: http://svn.apache.org/viewvc/subversion/site/staging/news.html?rev=1896475&r1=1896474&r2=1896475&view=diff
==============================================================================
--- subversion/site/staging/news.html (original)
+++ subversion/site/staging/news.html Tue Dec 28 13:49:34 2021
@@ -26,6 +26,31 @@
 <!-- Maybe we could insert H2's to split up the news items by  -->
 <!-- calendar year if we felt the need to do so.               -->
 
+<div class="h3" id="news-20211215">
+<h3>2021-12-15 &mdash; Subversion NOT affected by 
+ CVE-2021-44228 (Log4Shell)
+<a class="sectionlink" href="#news-20211215"
+   title="Link to this section">&para;</a>
+</h3>
+
+<p>Subversion is not based on Java and does not depend on the vulnerable
+ Apache Log4j library.</p>
+
+<p>Subversion provides language bindings for Java ("JavaHL") but this code
+ does not depend on the Apache Log4j library.</p>
+
+<p>However depending on your installation there may be related components
+ that are vulnerable:</p>
+  <ul>
+    <li>Some vendors provide Java based web interfaces bundled with their
+      Subversion distribution. Please check your vendor's information to
+      verify if you are vulnerable.</li>
+    <li>It is possible to write repository hooks in Java. These hooks are
+      written by the repository administrator.</li>
+  </ul>
+
+</div> <!-- #news-20210526 -->
+
 <div class="h3" id="news-20210526">
 <h3>2021-05-26 &mdash; IRC migration to libera.chat
 <a class="sectionlink" href="#news-20210526"

Propchange: subversion/site/staging/news.html
------------------------------------------------------------------------------
  Merged /subversion/site/publish/news.html:r1891316-1896474

Modified: subversion/site/staging/packages.html
URL: http://svn.apache.org/viewvc/subversion/site/staging/packages.html?rev=1896475&r1=1896474&r2=1896475&view=diff
==============================================================================
--- subversion/site/staging/packages.html (original)
+++ subversion/site/staging/packages.html Tue Dec 28 13:49:34 2021
@@ -75,6 +75,13 @@
    trust that <code>${YOUR_FAVORITE_SEARCH_ENGINE}</code> can
    facilitate that for you.</p>
 
+<p>A condition to be listed is to keep current with security fixes by
+   offering the latest supported patch release or by backporting
+   security patches. The rule will be implemented with a fair amount
+   of flexibility to allow time to release new packages, as well as
+   any considerations regarding the release process. Please discuss at
+   the <a href="mailto:users@subversion.apache.org">Subversion users
+   mailing list</a>.</p>
 
 <div class="h2" id="centos">
 <h2>Centos Linux
@@ -267,10 +274,6 @@ $ zypper install subversion-server</pre>
 <div class="package" style="background-image: url('/images/mac.png');">
 
 <ul>
-<li><p>An old version of Subversion is shipped with MacOS X.
-       See the <a href="https://www.apple.com/opensource/"
-       >open source section of Apple's web site</a> for more
-       information.</p></li>
 <li><p><a href="https://pdb.finkproject.org/pdb/package.php/svn"
        >Fink</a> (requires <a href="https://www.finkproject.org/">Fink</a
        >)</p>
@@ -280,7 +283,7 @@ $ zypper install subversion-server</pre>
     <pre>$ brew options subversion
 $ brew install (OPTIONS) subversion</pre>
 </li>
-<li><p><a href="https://www.macports.org/ports.php?by=name&amp;substr=subversion"
+<li><p><a href="https://ports.macports.org/port/subversion"
        >MacPorts</a> (requires <a href="https://www.macports.org/">MacPorts</a>)</p>
 </li>
 <li><p><a href="https://www.wandisco.com/subversion/download#osx">
@@ -288,6 +291,10 @@ $ brew install (OPTIONS) subversion</pre
        <a href="https://www.wandisco.com/subversion/"
        >WANdisco</a>; <em>requires registration</em>)</p>
 </li>
+<li><p>Older Subversion binaries were provided with Xcode in versions
+       of Mac OS X prior to 10.15 (Catalina). See the
+       <a href="https://www.apple.com/opensource/">open source section
+       of Apple's web site</a> for more information.</p></li>
 </ul>
 
 </div> <!-- .package -->

Propchange: subversion/site/staging/roadmap.html
------------------------------------------------------------------------------
  Merged /subversion/site/publish/roadmap.html:r1891316-1896474